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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

3 lease amend claims 1,3,5, and 10 as follows: 



/\ . (currently amended): A portable terminal for encrypting information, the portable 
terminal comprising: 

a display for displaying financial transaction options: 
an input for receiving financial data for a financial transaction: 

means for generating a new key for eae hthe financial transaction, wherein the new key is 
/ generated using one or more variable properties of the portable terminal ; and 
means for encrypting the financial data with the new key . 

2. (original): A portable terminal according to claim 1, wherein the new key is 
generated when the transaction is executed. 

3. (currently amended): A portable terminal according to claim 1, wherein the one 
or more variable p roperties of the portable terminal include the-date and time settings. 

4. (original): A terminal according to claim 1 , further comprising means for 
generating a unique challenge in addition to the new key so that a unique challenge can be issued 



PACE 5/23 * RCVD AT 5/21/2004 10:38:07 AM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/4 » DNIS:8729306 * CSID:919 806 1690 * DURATION (mm-ss): 06-56 



5-2 1 -04 ; 1 O : 38AM ; PR I EST L, 




OFF I CES 




1919 SOS 1690 



Appl. No. 09/65 1,979 

Amdt. dated May 20. 2004 

Reply to Office Action of February 26, 2004 



for each transaction. 



/5- 



(currently amended): A method of encrypting information mby a portable 



terminal, the method comprising the steps of: 

inputting financial data for a financial transaction at the portable terminal: 

using one or more properties of the portable terminal to obtain a sequence of values for 

the financial transaction ; and 

generating a new key based on the sequence of values for the financial transaction: and 
encrypting information related to the prepared financial transaction with the new key bv 

the portable terminal; . 

6. (original): A method according to claim 5, further comprising the step of: 
generating a unique challenge value based on the sequence of values. 

7. (original): A method according to claim 5, further comprising the steps of: 
encrypting the new key and the challenge value using a public key issued by a host; and 
transmitting the encrypted new key and challenge value to the host. 



terminal and a self-service terminal, the method comprising the steps of: 

using one or more properties of the portable terminal to obtain a sequence of values; 




(original): A method of communicating encrypted information between a portable 
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generating a new key based on the sequence of values; 
generating a challenge value based on the sequence of values; 
encrypting the new key and the challenge value using a public key; and 
transmitting the encrypted key and challenge value to the self-service terminal. 

9. (original): A method according to claim 8, further comprising the steps of: 
generating a new challenge value at the self-service terminal; 
encrypting the generated challenge value using the new key; 
transmitting the encrypted challenge value to the portable terminal; and 
awaiting a correct response to the transmitted challenge value being transmitted by the 
portable terminal before accepting any subsequent transaction at the self-service terminal. 

f 10. (currently amended): A transaction system comprising: 
a self-service terminal; and 

a portable terminal to execute an encryption program which is operable to use one or 
more variable properties of the portable terminal for (Obtaining a sequence of values, and (SK 
for generating a new key based on the sequence of values^ 

the portable t erminal encrypting information for a financial transaction with the new key, 
and the portable terminal wirelesslv transmitting encrypted information to the self service 
terminal. 

and 
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m e ans for onabling the portable terminal and tho self s e rvice terminal to 
int e rcommunicate using the now key. 



{ 1 1 . (original): A method of determining if a self-service terminal is an authentic 
terminal, the method comprising the steps of: 
^ using one or more properties of a portable terminal to obtain a sequence of values; 

generating a new key based on the sequence of values; 
generating a challenge value based on the sequence of values; 

encrypting the new key and challenge value using a public key provided by an institution; 
transmitting the encrypted key and challenge to the self-service terminal; 
receiving a response from the self-service terminal, decrypting the response using the new 
key; and 

halting any further transmission unless the decrypted response includes a correct reply to 
the challenge value, 



^^ease add new claims 12-23 as follows: 

1 2* (new): The portable terminal of claim 1 wherein the one or more variable 
properties includes data stored in a dynamic heap of a memory. 

v""B. (new): A portable terminal for encrypting information, the portable terminal 
comprising: 
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a user interface having a display, the display displaying transaction options for a financial 
transaction, the user interface receiving financial transaction data for the financial transaction; 
a memory storing an encryption program; 

a controller executing the encryption program to generate a key for the financial 
transaction, wherein the key is generated using one or more properties of the portable terminal, 
the controller encrypting the financial data with the key; and 

a communication port, in response to the user interface executing the financial 
transaction, the communication port wirelessly transmitting the encrypted information. 

1 4. (new): The portable terminal of claim 13 wherein the portable terminal is a 
personal digital assistant (PDA) and the encrypted information is transmitted to an automated 
teller machine(ATM). 

15. (new): The portable terminal of claim 1 3 wherein the key is a symmetric key. 

16. (new): The portable terminal of claim 13 wherein the user interface is a keypad 
and the financial transaction data includes a personal identification number. 

17. (new): The portable terminal of claim 16 wherein the personal identification 
number is biometric based. 
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1 8. (new): The portable terminal of claim 1 3 wherein the one or more properties 
include usage history stored in the memory. 




1 9. (new): The method of claim 5 further comprising: 



receiving a public key issued by a host computer, wherein the encrypting information step 
further comprises encrypting information using the public key. 

20. (new): The method of claim 8 wherein the step of generating a new key based on 
the sequence of values further comprises: 

splitting a hash value into a first half and a second half; and 
encrypting the second half with the first half to produce the new key. 
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